This class can register and login users stored in a database.
It can perform several actions to manage records of users in a database accessed using PDO. Currently it can:
- Create the records of a new registered user and mail the user a URL with a gkey
- Activate account with a given key
- Authenticate a user with a password and optional CAPTCHA verification and create a login session
- Logout from a user session
- Request to reset the user password
- Change the user password
- Delete user records
The class uses bcrypt to store hashed passwords,
It can also verify and block attackers by IP for a defined time after a given number of failed login attempts.
The class can as well prevent registration of users with known disposable email addresses. |
